sudo is highly configurable as to which user/group can do what. You can fine-tune which user can do X, which group can do Y, etc.
Agreed, but once I convinced the system admin that I had to do sudo make to compile some program. Having obtained the sudo access, I made a simple Makefile that called a script that modified the sudoer file, and gave me total control of the system. :-)